User authentication

ABSTRACT

A method, computer system, and computer program product for authenticating a user is provided. The method includes the steps of receiving a user input via a pressure-sensitive input interface, the user input being indicative of a possible component part of an authentication code or pattern, determining a pressure applied to the pressure-sensitive input interface by the user when providing the user input, determining whether to ignore the user input as a component part of the authentication code or pattern based on the pressure applied and irrespective of the whether the user input is determined to be ignored, providing an input acknowledgement signal to an output interface for indicating the user input was received. An associated apparatus is also included.

This application is a continuation application claiming priority to Ser.No. 16/246,814, filed Jan. 14, 2019, which is a continuation of Ser. No.15/423,824, filed Feb. 3, 2017, U.S. Pat. No. 10,216,311, issued Feb.26, 2019.

TECHNICAL FIELD

The present invention relates to relates user authentication, and moreparticularly to method for authenticating a user of a pressure-sensitiveinput interface.

BACKGROUND

Commonly-used authentication methods require a user to input (e.g. typeor ‘key-in’) an authentication code or pattern, such as password, code,Personal Identification Number (PIN), or secret key-phrase, via an inputinterface. When inputting or ‘entering’ such authentication information,a third-party or attacker may be able to observe the input information(e.g. by looking over the user's shoulder, which is referred to as‘shoulder surfing’).

Such potential, unwanted exposure of secret or sensitive authenticationinformation is particularly problematic with the use of an automatedteller machine (ATM), but is also becoming highly problematic withwidespread adoption and use of mobile computing devices (e.g. tabletcomputer and smartphones).

Concepts for protecting secret or sensitive authentication as the secretor sensitive authentication is being input to a user interface have beenproposed, but the concepts typically are not usable on smaller portablecomputing devices. Moreover, the input information may still bevulnerable if the third-party or attacker (e.g. ‘shoulder surfer’) isable to see a row letter being used.

SUMMARY

An aspect of this invention relates to a method, and associated computersystem and computer program product, for authenticating a user. Aprocessor of a computing system receives a user input via apressure-sensitive input interface, the user input being indicative of apossible component part of an authentication code or pattern. A pressureapplied to the pressure-sensitive input interface by the user whenproviding the user input is determined. Whether to ignore the user inputas a component part of the authentication code or pattern based on thepressure applied is also determined. Irrespective of whether the userinput is determined to be ignored, an input acknowledgement signal isprovided to an output interface for indicating the user input wasreceived.

A further aspect of this invention is an apparatus for authenticating auser. The apparatus includes a pressure-sensitive input interfaceadapted to receive a user input, the user input being indicative of apossible component part of an authentication code or pattern, a pressuredetermination arrangement adapted to determine a pressure applied to thepressure-sensitive input interface by the user when providing the userinput, a processing unit adapted to determine whether to ignore the userinput as a component part of the authentication code or pattern based onthe pressure applied, and an output interface adapted to provide aninput acknowledgement signal for indicating the user input was received,irrespective of the whether the processing unit determined to ignore theuser input.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 depicts a pictorial representation of a distributed system, inaccordance with embodiments of the present invention.

FIG. 2 is a block diagram of a portable computing system, in accordancewith embodiments of the present invention.

FIG. 3 is a simplified block diagram of a portable computing device, inaccordance with embodiments of the present invention.

FIG. 4A depicts a sequence of user inputs provided viapressure-sensitive input interface with respect to time, in accordancewith embodiments of the present invention

FIG. 4B depicts the pressure applied to pressure-sensitive inputinterface with respect to time for the same time period as that of FIG.4A, in accordance with embodiments of the present invention.

FIG. 4C depicts a rectangular region of the output interface asdisplayed at time T, in accordance with embodiments of the presentinvention.

FIG. 4D depicts a real/true input as determined by the processing unitand as intended to be provided by the user for use actual inputinformation, in accordance with embodiments of the present invention.

FIG. 5 is a simplified diagram of a door entry system, in accordancewith embodiments of the present invention.

FIG. 6A depicts a sequence of user inputs provided viapressure-sensitive input interface with respect to time, in accordancewith embodiments of the present invention.

FIG. 6B depicts the pressure applied to pressure-sensitive inputinterface with respect to time for the same time period as that of FIG.6A, in accordance with embodiments of the present invention.

FIG. 6C depicts the sounds output by the output interface with respectto time, in accordance with embodiments of the present invention.

FIG. 6D depicts the real/true input as determined by the processing unitand as intended to be provided by the user for use actual inputinformation, in accordance.

FIG. 7 is a flow diagram of a computer-implemented method, in accordancewith embodiments of the present invention.

FIG. 8 is a block diagram of a computer device, in accordance withembodiments of the present invention.

DETAILED DESCRIPTION

Embodiments of the invention may enable a user to falsify or fake inputinformation that may be visible to a third-party watching the user inputthe information via an input interface. By using or ignoring inputsbased on the pressure applied to the input interface when entering theinputs, embodiments may allow a user to enter inputs that, althoughignored as a part of the input information, appear to form part of theinput information through the eyes of a viewing third-party (e.g.shoulder surfer). In this way, and by way of example only, a user mayinput an authentication code or pattern via a pressure-sensitive inputinterface and distinguish between ‘real’ and ‘fake’ inputs (e.g.components of the code or pattern) by applying two different pressuresto the pressure-sensitive input interface for the inputs, a firstpressure for the real inputs and a second pressure for the fake inputs.Inputs provided using the second applied pressure may then be identifiedand ignored as actual inputs, such that only inputs provided using thefirst applied pressure may be used as actual inputs (e.g. actualcomponents of the code or pattern). However, for each provided input(irrespective of the pressure applied), an input acknowledgement signal(such as an audible noise and/or visible graphic) may be provided via anoutput interface so as to indicate each user input was received, therebyindicating to a viewing third-party that all inputs form part of theauthentication code or pattern. The input acknowledgement signal maymislead the viewing third-party into believing that the fake inputs wereindeed input by the user and are components of the authentication codeor pattern.

Embodiments may thus provide for an input concept which allows a user touse differing amounts of pressure to enter information (e.g. numbers,letters, symbols, commands, alpha-numeric characters, etc.) that doesnot form part of the information the user intends to actually use, whichmay enable users to feign or fake the inputting of sensitive or privateinformation in a convincing manner so as to mislead or deceive athird-party watching the user input the information (e.g. over theuser's shoulder or via a hidden camera). Embodiments may further enhancethe falsification of input information by outputting (e.g.communicating) an acknowledgement signal which indicates that inputinformation has been received/used, even though the input informationmay have been disregarded as not forming part of the information theuser intends to use.

Embodiments may avoid a user having to remember separate and potentiallycomplicated information for improving the security of an authenticationcode or pattern. Further, embodiments may provide improved flexibilityto a user by enabling dummy or fake inputs (e.g. components parts of anauthentication code or pattern) to be input whenever desired and inwhichever order is desired. Such flexibility in providing fake or falseinputs may actually further improve security by avoiding the need forfixed patterns or arrangements of fake or false inputs to be used. Forinstance, embodiments may enable fake inputs to be input at randomanywhere in an authentication code or pattern.

Furthermore, many different ways to implement pressure-sensitive inputinterfaces and/or to identify and distinguish inputs provided atdifferent applied pressures may be employed by embodiments, some ofwhich are already widely known and employed in input interfaces andcomputing systems. For example, touch-sensitive display panels that candistinguish between touches at various pressures are widely available.Also, keyboard and keypads that employ buttons/keys that can distinguishbetween at least two different pressures applied to buttons/keys areknown and widely available. Accordingly, technical requirements forembodiments may already be known and widely available, thus enablingembodiments to be implemented relatively easily and/or cheaply.

Embodiments may further comprise: providing a haptic feedback signal tothe user based on the pressure applied, the haptic feedback signal beingindicative of whether or not the user input is ignored as a componentpart of the authentication code or pattern. Thus, the user may beprovided with an invisible signal (e.g. a signal that the user mayperceive by touch, such a vibration) that informs the user that afake/false input has been identified and disregarded. Provision of ahaptic signal, which cannot be viewed by a third-person for example, maythus enable the user to know that a false input has been identifiedwhilst not informing a watching third-party of the same.

The step of determining whether or not to ignore the user input maycomprise: comparing the pressure applied with a threshold value; anddetermining to ignore the user input based on the comparison result.Embodiments may therefore enable the concept of distinguishing betweeninputs by simply applying a pressure a pressure-sensitive inputinterface that is either greater than or less than a predeterminedamount. For instance, the step of determining to ignore the user inputmay comprise determining to ignore the user input if the comparisonresult indicates the pressure applied is less than the threshold value.In this way, when a user presses lightly (e.g. applies a low pressure)on the pressure-sensitive interface to input a component part of anauthentication code, the component part may be identified as being falseand thus ignored (e.g. not used or recognized) as a component part of anauthentication code that the user actually desires to use forauthentication purposes. Conversely, when a user presses normally orheavily (e.g. applies a medium or high pressure) on thepressure-sensitive interface to input a component part of anauthentication code, the component part may be identified as being trueand thus used or recognized as a component part of an authenticationcode that the user actually desires to use for authentication purposes.

In some embodiments, the input acknowledgement signal may be adapted tocause the output interface to communicate a visual or audio signalindicating that the user input was received via the pressure-sensitiveinput interface. By way of example, for every input provided by theuser, an embodiment may be adapted to control a display screen todisplay a graphical element indicating that the input has been entered(e.g. successfully received and used). In this way, a visible indicationmay be provided to a viewing third-party which indicates that an inputhas been entered, even though the input has been identified by theembodiment as being fake/false and thus disregarded as a component partof an authentication code or pattern. Similarly, and by way of furtherexample, for every input provided by the user, an embodiment may beadapted to control an audio output device (such as a loudspeaker) tooutput an audible signal indicating that the input has been entered(e.g. successfully received and used). In this way, an audibleindication (e.g. beep, bleep or click) may be provided to a viewingand/or listening third-party which indicates that an input has beenentered, even when the input has been identified by the embodiment asbeing fake/false and thus disregarded as a component part of anauthentication code or pattern. The viewing and/or listening third-partymay then be misled into thinking fake/false inputs provided by a userform part of the authentication code or pattern.

According to another embodiment of the present invention, there isprovided a computer program product for authenticating a user, thecomputer program product comprising a computer readable hardware storagedevice having program instructions embodied therewith, the programinstructions executable by a processing unit to cause the processingunit to perform a method comprising: receiving a user input via apressure-sensitive input interface, the user input being indicative of apossible component part of an authentication code or pattern;determining a pressure applied to the pressure-sensitive input interfaceby the user when providing the user input; determining whether or not toignore the user input as a component part of the authentication code orpattern based on the pressure applied; and irrespective of the whetherit is determined to ignore the user input, providing an inputacknowledgement signal to an output interface for indicating the userinput was received.

The computer-readable hardware storage device may be selected from thegroup consisting of a CD, a DVD, a flash memory card, a USB memorystick, a random access memory, a read-only memory, a computer hard disk,a storage area network, a network server, and an Internet server.

According to another embodiment of the present invention, there isprovided a computer system comprising: a computer program productaccording to an embodiment; and a processing unit adapted to perform allof the steps of method according to an embodiment by execution of thecomputer-readable program code of said computer program product.

According to another embodiment of the present invention, there isprovided apparatus for authenticating a user, the apparatus comprising:a pressure-sensitive input interface adapted to receive a user input,the user being indicative of a possible component part of anauthentication code or pattern; a pressure determination arrangementadapted to determine a pressure applied to the pressure-sensitive inputinterface by the user when providing the user input; a processing unitadapted to determine whether or not to ignore the user input as acomponent part of the authentication code or pattern based on thepressure applied; and an output interface adapted to provide an inputacknowledgement signal for indicating the user input was received,irrespective of the whether the processing unit determined to ignore theuser input.

Thus, there may be an information input apparatus which canautomatically and dynamically distinguish between false and real userinputs based on a pressure applied when providing the user inputs. Theapparatus may, for example, process a received user input, in real time,so as to provide a modified user input wherein falsified or dummy userinputs are ignored or disregarded whilst providing an acknowledgementsignal for indicating all of the user inputs have been used,irrespective of the whether the inputs have been used orignored/disregarded. In this way, the acknowledgement signal may misleada third-party into thinking that the falsified or dummy user inputs formpart of the input information. For example, the apparatus may enable auser to input an authentication code or password comprising dummy orfake component parts (e.g. false characters or numbers), so as toprevent a viewing third-party from learning the correct/realauthentication code or password by watching the user input information.An embodiment of an apparatus may therefore use applied-pressureinformation to identify and disregard user inputs in real-time so as toavoid unnecessary time delays caused by extensive processing of theinput information.

Embodiments may further comprise a haptic feedback arrangement adaptedto provide a haptic feedback signal to the user based on the pressureapplied, the haptic feedback signal being indicative of whether or notthe user input is ignored as a component part of the authentication codeor pattern. By way of example, the haptic feedback arrangement maycomprise a vibrator that is adapted to vibrate so as to provide avibration signal that can be felt or sensed by the user (e.g. by touch).The haptic feedback signal may indicate to the user that a fake/falseinput has been identified and ignored. Provision of such a haptic signalmay thus enable the user to know that a false input has been identifiedwhilst preventing a watching third-party from knowing the same.

Embodiments may be employed in data entry devices, portable computingdevices, keyboards and/or keypads and may be of particular use in ATMs,door entry systems, locking systems, or any other devices which mayenable a person to input potentially secret or sensitive authenticationinformation (such as a Personal Identification Number (PIN), passcode,or password) by touch of a user interface). For instance, such systemsmay be adapted to capture a user input passcode containing eight validcharacters and two dummy characters and then identify and disregard thetwo dummy characters whilst displaying on a screen (and thus to aviewing third-party) graphic elements indicating that the passcode inputby the user contained ten characters.

In some embodiments, the processing unit may be adapted to compare thepressure applied with a threshold value, and to determine to ignore theuser input based on the comparison result. For example, the processingunit may be adapted to determine to ignore the user input if thecomparison result indicates the pressure applied is less than thethreshold value.

In an embodiment, the output interface may be adapted to communicate,based on the input acknowledgement signal, an audible or visible signalindicating that the user input was received via the pressure-sensitiveinput interface.

Embodiments may be employed in mobile computing devices, such as tabletcomputers, laptop computers, smart (e.g. internet-enabled) televisionsor displays, smartphones or other communication devices, personaldigital assistants (PDAs), or the like.

Embodiments may also be employed in a user input device comprisingapparatus for authenticating a user, such a keypad for an ATM, safe ordoor entry device.

Embodiments of the present invention may include a data input conceptthat enables a user to employ differing amounts of pressure to enterdummy or fake information that may be visible to a third-party watchingthe user input the information. In this way, a third-party may be misledas to the information being input by the user, thereby enabling a userto protect sensitive or secret information, such as an authenticationcode or pattern.

Embodiments may use or ignore inputs based on the pressure applied to apressure-sensitive input interface when entering the inputs, which mayallow a user to enter dummy inputs that appear to form part of the inputinformation (through the eyes of a viewing third-party) although thedummy inputs are disregarded as a part of the input information. Foreach user-provided input (irrespective of the pressure applied), aninput acknowledgement signal (such as an audible noise and/or visiblegraphic) may be provided via an output interface so as to indicate eachuser input was received, thereby signifying to a viewing third-partythat all inputs (including the dummy inputs) form part of the inputinformation (e.g. the authentication information). Providing the inputacknowledgement signal may trick the viewing third-party into believingthat the dummy inputs were input by the user and are components of theinput information.

Embodiments may cater for the use of differing amounts of pressure todifferentiate inputted information (e.g. numbers, letters, symbols,commands, alpha-numeric characters, etc.) between true information andfalse information (e.g. dummy, fake, pretend, imitation, etc.). Usingdiffering amount of pressure to differentiate inputted information mayenable a user to falsify the inputting of sensitive or privateinformation in a manner that may mislead or deceive a third-partywatching the user input the information (e.g. over the user's shoulderor via a hidden camera). Embodiments may enhance the falsification ofinput information by outputting (e.g. communicating) an acknowledgementsignal which indicates that falsified input information (e.g. dummyinput) has been received/used, even though it may have been disregardedas not being true information forming part of the information the userintends to use.

Embodiments may therefore provide a simple and flexible method forprotecting private, secret or confidential information when beingprovided by a user via a touch-based user interface. Such embodimentsmay be employed using existing pressure-sensitive input interfaces thatare already widely known and available. Accordingly, technicalrequirements for embodiments may be reduced to levels that enableembodiment to be implemented relatively easily and/or cheaply.

Furthermore, embodiments may enable real-time processing of user inputs,so as to avoid unnecessary time delays that may detract from userexperience or negatively impact security protection provided. Forinstance, embodiments may enable user input to be captured and processedinstantaneously so as to selectively keep or disregard user input in atransparent manner.

Illustrative embodiments may therefore provide concepts for protectingsensitive or private information that is input to a system via atouch-based (e.g. tactile) user interface. Any input processing systemcould be used with the concepts, but it may be preferable for such asystem to exhibit at least one of the following qualities: dataprocessing capabilities; and visual and/or audio communicationcapabilities.

Modifications and additional steps to conventional touch-based userinterface systems are also provided which may enhance the value andutility of the concepts.

Reference to an authentication code or pattern may be taken to refer toany sequence or pattern of input information that may be used foruser-authentication purposes, and such information may containcomponents that may be protected, confidential or sensitive in nature,such as text, images, alphanumeric characters, logos, shapes, colors,keys, codes, passwords, dates, locations, etc.

Reference to a pressure-sensitive input interface may be taken to referto any input interface that is adapted to detect a pressure applied tothe interface when a user provides an input via the interface. Examplesof pressure-sensitive interface may include a touch-sensitive panel, apressure-sensitive tactile interface, a force sensing panel, a pluralityof differently force-resistant switches, and the like.

Illustrative embodiments may be utilized in many different types of dataprocessing environments. In order to provide a context for thedescription of elements and functionality of the illustrativeembodiments, FIGS. 1 and 2 are provided hereafter as exampleenvironments in which aspects of the illustrative embodiments may beimplemented. It should be appreciated that FIGS. 1 and 2 are onlyexamples and are not intended to assert or imply any limitation withregard to the environments in which aspects or embodiments of thepresent invention may be implemented. Many modifications to the depictedenvironments may be made without departing from the spirit and scope ofthe present invention.

FIG. 1 depicts a pictorial representation of a distributed system, inaccordance with embodiments of the present invention. Distributed system100 may include a network of computers in which aspects of theillustrative embodiments may be implemented. The distributed system 100contains at least one network 102, which is the medium used to providecommunication links between various devices and computers connectedtogether within distributed data processing system 100. The network 102may include connections, such as wire, wireless communication links, orfiber optic cables.

In the depicted example, a first 104 and second 106 servers areconnected to the network 102 along with a storage unit 108. In addition,clients 110, 112, and 114 are also connected to the network 102. Theclients 110, 112, and 114 may be, for example, personal computers,network computers, smartphones, video capture devices, digital imagingdevices, portable cameras, Oculus Rift® devices, VR devices, or thelike. In the depicted example, the first server 104 provides data, suchas boot files, operating system images, and applications to the clients110, 112, and 114. Clients 110, 112, and 114 are clients to the firstserver 104 in the depicted example. The distributed prediction system100 may include additional servers, clients, and other devices notshown.

In the depicted example, the distributed system 100 is the Internet withthe network 102 representing a worldwide collection of networks andgateways that use the Transmission Control Protocol/Internet Protocol(TCP/IP) suite of protocols to communicate with one another. At theheart of the Internet is a backbone of high-speed data communicationlines between major nodes or host computers, consisting of thousands ofcommercial, governmental, educational and other computer systems thatroute data and messages. Of course, the distributed system 100 may alsobe implemented to include a number of different types of networks, suchas for example, an intranet, a local area network (LAN), a wide areanetwork (WAN), or the like. As stated above, FIG. 1 is intended as anexample, not as an architectural limitation for different embodiments ofthe present invention, and therefore, the particular elements shown inFIG. 1 should not be considered limiting with regard to the environmentsin which the illustrative embodiments of the present invention may beimplemented.

FIG. 2 is a block diagram of a portable computing system 200, inaccordance with embodiments of the present invention. The system 200 isan example of a portable computing device, such as client 110 in FIG. 1,in which computer usable code or instructions implementing the processesfor illustrative embodiments of the present invention may be located.

In the depicted example, the system 200 employs a hub architectureincluding a north bridge and memory controller hub (NB/MCH) 202 and asouth bridge and input/output (I/O) controller hub (SB/ICH) 204. Aprocessing unit 206, a main memory 208, and a graphics processor 210 areconnected to NB/MCH 202. The graphics processor 210 may be connected tothe NB/MCH 202 through an accelerated graphics port (AGP).

In the depicted example, a local area network (LAN) adapter 212 connectsto SB/ICH 204. An audio adapter 216, a keyboard and a mouse adapter 220,a modem 222, a read only memory (ROM) 224, a hard disk drive (HDD) 226,a CD-ROM drive 230, a universal serial bus (USB) ports and othercommunication ports 232, and PCI/PCIe devices 234 connect to the SB/ICH204 through first bus 238 and second bus 240. PCI/PCIe devices mayinclude, for example, Ethernet adapters, add-in cards, and PC cards fornotebook computers. PCI uses a card bus controller, while PCIe does not.ROM 224 may be, for example, a flash basic input/output system (BIOS).

The HDD 226 and CD-ROM drive 230 connect to the SB/ICH 204 throughsecond bus 240. The HDD 226 and CD-ROM drive 230 may use, for example,an integrated drive electronics (IDE) or serial advanced technologyattachment (SATA) interface. Super I/O (SIO) device 236 may be connectedto SB/ICH 204.

An operating system runs on the processing unit 206. The operatingsystem coordinates and provides control of various components within thesystem 200 in FIG. 2. As a client, the operating system may be acommercially available operating system. An object-oriented programmingsystem, such as the Java™ programming system, may run in conjunctionwith the operating system and provides calls to the operating systemfrom Java™ programs or applications executing on system 200.

As a server, system 200 may be, for example, an IBM® eServer™ System p®computer system, running the Advanced Interactive Executive (AIX®)operating system or the LINUX® operating system. The system 200 may be asymmetric multiprocessor (SMP) system including a plurality ofprocessors in processing unit 206. Alternatively, a single processorsystem may be employed.

Instructions for the operating system, the object-oriented programmingsystem, and applications or programs are located on storage devices,such as HDD 226, and may be loaded into main memory 208 for execution byprocessing unit 206. Similarly, one or data structures according to anembodiment may be adapted to be stored by the storage devices and/or themain memory 208.

The processes for illustrative embodiments of the present invention maybe performed by processing unit 206 using computer usable program code,which may be located in a memory such as, for example, main memory 208,ROM 224, or in one or more peripheral devices 226 and 230, for example.

A bus system, such as first bus 238 or second bus 240 as shown in FIG.2, may be comprised of one or more buses. Of course, the bus system maybe implemented using any type of communication fabric or architecturethat provides for a transfer of data between different components ordevices attached to the fabric or architecture. A communication unit,such as the modem 222 or the network adapter 212 of FIG. 2, may includeone or more devices used to transmit and receive data. A memory may be,for example, main memory 208, ROM 224, or a cache such as found inNB/MCH 202 in FIG. 2.

The hardware in FIGS. 1 and 2 may vary depending on the implementation.Other internal hardware or peripheral devices, such as 3D spatialtracking devices, video capture devices, positioning systems,accelerometer arrangement, equivalent non-volatile memory, or opticaldisk drives and the like, may be used in addition to or in place of thehardware depicted in FIGS. 1 and 2. Also, the processes of theillustrative embodiments may be applied to a multiprocessor data orvideo processing system, other than the system mentioned previously,without departing from the scope of the embodiments.

Moreover, the system 200 may take the form of any of a number ofdifferent data or video processing systems including client computingdevices, server computing devices, a tablet computer, laptop computer,smart (e.g. internet-enabled) television or display, smartphone or othercommunication device, a personal digital assistant (PDA), or the like.In some illustrative examples, the system 200 may be a portablecomputing device that is configured with flash memory to providenon-volatile memory for storing operating system files and/oruser-generated data, for example. Thus, the system 200 may essentiallybe any known or later-developed data processing system withoutarchitectural limitation.

Embodiments may enhance a user authentication system or method byproviding for false or dummy inputs to be provided by a user in a mannerthat misleads an observing third-party into thinking the dummy/falseinputs form part of the information input the by user, therebypreventing the third-party from ascertaining sensitive or secretinformation.

Embodiments may employ a pressure-sensitive input interface to enable auser to input the false/dummy information that is disregarded as anactual input whilst appearing to be true input information to anobserving third-party. By altering a pressure applied to the interfacewhen inputting information, a user can distinguish between real/trueinput information and false/dummy information. Such pressure-based inputclassification concepts can be applied to authentication applications,arrangements and systems, thus improving the security of touch-based(e.g. tactile) authentication systems that may be visible tothird-parties.

FIG. 3 is a simplified block diagram of a portable computing device 300,in accordance with embodiments of the present invention. In the exampledepicted in FIG. 3, the mobile computing device 300 is a PDA 300, but itwill be appreciated that similar examples may comprise a smartphone,tablet computer, or the like.

The PDA 300 comprises an apparatus for authenticating a user accordingto an exemplary embodiment. More specifically, the PDA 300 comprises apressure-sensitive input interface 310 adapted to receive user inputs,and a pressure determination arrangement (not shown) adapted todetermine a pressure applied to the pressure-sensitive input interfaceby the user when providing the user inputs.

By way of example, the pressure-sensitive input interface 310 maycomprise first 310A to fifth 310E buttons, and a pressure determinationarrangement may be integrated with the pressure sensitive input 310 sothat the pressure sensitive input 310 is positioned directly underneaththe first 310A to fifth 310E buttons and thus not visible from theexterior of the PDA 300.

The PDA 300 also comprises a processing unit (not shown) and an outputinterface 320.

The processing unit may be adapted to determine whether or not to ignorea user input based on the pressure applied to the pressure-sensitiveinput interface 310 by the user when providing the user input. By way ofexample, the processing unit may comprise an arrangement of one or moremicroprocessors housed within the PDA 300 and may be communicativelycoupled to the pressure-sensitive input interface 310 and the pressuredetermination arrangement.

The output interface 320 may be adapted to provide an inputacknowledgement signal for indicating a user input was received,irrespective of the whether the processing unit has determined to ignorethe user input. For instance, the output interface 320 may be adapted todisplay a rectangular region 330 within which graphical elements 335 maybe displayed to indicate reception of a user input. Each displayedgraphical element 335 may be associated with a separately receivedinput. In this way, the number of graphical elements 335 displayed inthe rectangular region 330 of the output interface may equal the numberof user inputs received via the pressure-sensitive input interface 310.

The apparatus for authenticating a user that is provided by the PDA 300may automatically and dynamically distinguish between a false and realuser input (received via the pressure-sensitive input interface 310)based on a pressure applied when providing the user input.

The apparatus may, for example, process a received user input byanalyzing the pressure applied by the user when providing the user inputso as to determine if the user input is false (e.g. dummy or fake) orreal (e.g. a true input intended by the user to be used as inputinformation). For instance, the processing unit may be adapted tocompare the pressure applied with a threshold value, and to determinewhether or not to ignore the user input based on the comparison result.By way of example, according to an embodiment, the processing unit maybe adapted to determine to ignore the user input if the comparisonresult indicates the pressure applied is less than the threshold value.Conversely, the processing unit may be adapted to determine to use (e.g.not ignore) the user input if the comparison result indicates thepressure applied is greater than the threshold value. Because such acomparison process is relatively simple, the processing undertaken bythe processing unit may be minimal and therefore not impact availableprocessing and/or power resources of the PDA 300. The processing mayalso be undertaken so quickly that the processing is undertaken inreal-time (e.g. practically instantaneously).

The apparatus of the PDA 300 may thus be arranged such that falsified ordummy user inputs are ignored or disregarded. Furthermore, irrespectiveof the whether the user inputs are ignored, the output interface 320 mayprovide an input acknowledgement signal whilst providing anacknowledgement signal for indicating all of the user inputs have beenused. For instance, the output interface 320 may be adapted to displayan input acknowledgement signal comprising a plurality of graphicalelements 335 in the rectangular region 330, wherein the number ofgraphical elements 335 is equal to the number of user inputs receivedvia the pressure-sensitive input interface 310. In this way, theacknowledgement signal may mislead a third-party into thinking that thefalsified or dummy user inputs form part of the input information.

For example, the PDA 300 may enable a user to input an authenticationcode or password via the first 310A to fifth 310E buttons of thepressure-sensitive input interface 310. The inputs provided by the usermay comprise dummy or fake component parts (e.g. false button presses)that are indicated as such by the user only pressing lightly (e.g.applying a low pressure) on the pressure-sensitive input interface 310when the dummy or fake inputs are provided. Such dummy or fake componentparts of the input information may be identified by the processing unit(based on the applied pressure) and then disregarded/ignored as inputs.In this way, a third-party observing the user inputting the informationmay be prevented from learning the correct/real authentication code orpassword by watching the user input information.

Put another way, the apparatus of the PDA 300 may use applied-pressureinformation obtained by the pressure determination arrangement toidentify and disregard at least one user input whilst providing a visualacknowledgement signal suggesting to an observer that all inputs aretrue/real (e.g. implying that no user inputs have been disregarded).

Thus, embodiments of the PDA 300 depicted in FIG. 3 may automaticallyand dynamically identify and disregard dummy inputs provided by a userbased on pressure applied by the user when providing the inputs, whichmay enable a user to identify dummy/fake inputs to the PDA 300 in aquick and simple manner which is not visible to an observing party. Theuser may also be free to choose in what order or combination to providethe dummy/fake inputs. The embodiment may therefore enable a high degreeof flexibility and ease of use for a user.

One or more parts of the apparatus of FIG. 3 may be used in conjunctionwith applications or systems that require a user to provide secret orsensitive information via the pressure-sensitive input interface 310,and thus may be employed in or with authentication applications, methodand/or systems, and the like. For instance, such applications maycomprise personal banking functionality, wherein a user is required toinput a PIN number/code to access sensitive information and/orfunctionality.

Embodiments may also be distributed at various positions throughout anauthentication system, rather than being located at the location of thepressure-sensitive input interface for example. Taking such an approachmay enable processing and/or hardware requirements to be distributedaccording to requirements, thus potentially reducing cost complexity,and/or resource implications where desired.

FIG. 4A depicts a sequence of user inputs provided viapressure-sensitive input interface 310 with respect to time, inaccordance with embodiments of the present invention.

FIG. 4B depicts the pressure applied to pressure-sensitive inputinterface 310 with respect to time for the same time period as that ofFIG. 4A, in accordance with embodiments of the present invention. FIG.4C depicts the rectangular region 330 of the output interface 320 asdisplayed at time T (i.e. after the user inputs have been provided), inaccordance with embodiments of the present invention. FIG. 4D depictsthe real/true input as determined by the processing unit and as intendedto be provided by the user for use actual input information, inaccordance with embodiments of the present invention.

Here, the first 310A to fifth 310E buttons are associated with inputs“A” to “E” respectively. An authentication code comprising a sequence ofcharacters selected from the set of “A” to “E” may therefore be input bya user pressing the first 310A to fifth 310E buttons in the appropriateorder. By way of example, a user may wish to enter an authenticationcode “ABEB” using the pressure-sensitive input interface 310 of the PDA300. However, in doing so, and in accordance with embodiments, the usermay attempt to obfuscate the input authentication code by inputtingdummy/fake characters when inputting the authentication code. By way ofexample, the user may input dummy/fake characters such that the userpresses the first 310A to fifth 310E buttons in a sequence thatindicates the input code as “ABCDEAB”.

Referring to FIG. 4A, in this example, the user presses buttons of thepressure-sensitive input interface 310 in an order depicted by theletters in the respective time slots. More specifically, the userpresses the buttons in the following order: first button 310A, followedby the second button 310B, followed by the third button 310C, followedby the fourth button 310D, followed by the fifth button 310E, followedby the first button 310A, and then finally the second button 310B.

Referring now to FIG. 4B, the pressure applied by the user to thepressure-sensitive input interface 310 when pressing each of the buttonsof the above mentioned order/sequence can be seen.

In particular, it can be seen that the user provides the first input(i.e. pressing first button 310A) by applying a strong (e.g. high)pressure that exceeds a predefined threshold value, Th, therebyindicating that the input (“A”) of the first input is a true/real input.The pressure determination arrangement determines a value of the (e.g.strong) pressure and the processing unit compares the determined valueof the applied pressure with the threshold value, Th, so as to identifythat the value of the applied pressure exceeds the threshold value, Th.In view of identifying the value of the applied pressure exceeds thethreshold value, Th, the processing unit determines that the value (“A”)of the first input is a true/real input and records the input (“A”) asthe first component part of the authentication code provided by theuser, as depicted in FIG. 4D. Irrespective of the determination made bythe processing unit, the processing unit also controls the outputinterface 320 to display a first graphical element 335 i in therectangular region 330, as depicted in FIG. 4C, so as to display aninput acknowledgement signal that indicates the first user inputprovided by the user pressing the first button 310A was received.

Next, FIG. 4B shows that the user provides the second input (i.e.pressing second button 310B) by applying a strong (e.g. high) pressurethat exceeds the predefined threshold value, Th, thereby indicating thatthe input value (“B”) of the second input is a true/real input. Thepressure determination arrangement determines a value of the (e.g.strong) applied pressure and the processing unit compares the determinedvalue of the applied pressure with the threshold value so as to identifythat the value of the applied pressure exceeds the threshold value, Th.In view of identifying that the value of the applied pressure exceedsthe threshold value, Th, the processing unit determines that the value(“B”) of the second input is a true/real input and records the input(“B”) as the second component part of the authentication code providedby the user, as depicted in FIG. 4D. Irrespective of the determinationmade by the processing unit, the processing unit also controls theoutput interface 320 to display a second graphical element 335 ii in therectangular region 330, as depicted in FIG. 4C, so as to display aninput acknowledgement signal that indicates the second user inputprovided by the user pressing the second button 310B was received.

Next, FIG. 4B shows that the user provides the third input (i.e.pressing third button 310C) by applying a light (e.g. low) pressure thatdoes not exceed the predefined threshold value, Th, thereby indicatingthat the input (“C”) of the third input is a false/fake input. Thepressure determination arrangement determines a value of the (e.g.light) applied pressure and the processing unit compares the determinedvalue of the applied pressure with the threshold value, Th, so as toidentify that the value of the applied pressure does not exceed thethreshold value, Th. In view of identifying that the value of theapplied pressure does not exceed the threshold value, the processingunit determines that the value (“C”) of the third input is a false/fakeinput and disregards the value (“C”) of the third input as a componentpart of the authentication code provided by the user. Irrespective ofthe determination made by the processing unit, the processing unit alsocontrols the output interface 320 to display a third graphical element335 iii in the rectangular region 330, as depicted in FIG. 4C, so as todisplay an input acknowledgement signal that indicates the third userinput provided by the user pressing the third button 310C was received.

FIG. 4B also shows that the user then provides the fourth input (i.e.pressing fourth button 310D) by applying a light (e.g. low) pressurethat does not exceed the predefined threshold value, Th, therebyindicating that the input (“D”) of the fourth input is a false/fakeinput. The pressure determination arrangement determines a value of the(e.g. light) applied pressure and the processing unit compares thedetermined value of the applied pressure with the threshold value, Th,so as to identify that the value of the applied pressure does not exceedthe threshold value, Th. In view of identifying that the value of theapplied pressure does not exceed the threshold value, the processingunit determines that the value (“D”) of the fourth input is a false/fakeinput and disregards the value (“D”) of the fourth input as a componentpart of the authentication code provided by the user. Irrespective ofthe determination made by the processing unit, the processing unit alsocontrols the output interface 320 to display a fourth graphical element335 iv in the rectangular region 330, as depicted in FIG. 4C, so as todisplay an input acknowledgement signal that indicates the fourth userinput provided by the user pressing the fourth button 310D was received.

Referring still to FIG. 4B, the user then provides the fifth input (i.e.pressing fifth button 310E) by applying a strong (e.g. high) pressurethat exceeds the predefined threshold value, Th, thereby indicating thatthe input value (“E”) of the fifth input is a true/real input. Thepressure determination arrangement determines a value of the (e.g.strong) applied pressure and the processing unit compares the determinedvalue of the applied pressure with the threshold value so as to identifythat the value of the applied pressure exceeds the threshold value, Th.In view of identifying that the value of the applied pressure exceedsthe threshold value, Th, the processing unit determines that the value(“E”) of the fifth input is a true/real input and records the input(“E”) as the third component part of the authentication code provided bythe user, as depicted in FIG. 4D). Irrespective of the determinationmade by the processing unit, the processing unit also controls theoutput interface 320 to display a fifth graphical element 335 v in therectangular region 330, as depicted in FIG. 4C, so as to display aninput acknowledgement signal that indicates the fifth user inputprovided by the user pressing the fifth button 310E was received.

FIG. 4B depicts that the user then provides the sixth input (i.e.pressing first button 310A) by applying a light (e.g. low) pressure thatdoes not exceed the predefined threshold value, Th, thereby indicatingthat the input value (“A”) of the sixth input is a false/fake input. Thepressure determination arrangement determines a value of the (e.g.light) applied pressure and the processing unit compares the determinedvalue of the applied pressure with the threshold value, Th, so as toidentify that the value of the applied pressure does not exceed thethreshold value, Th. In view of identifying that the value of theapplied pressure does not exceed the threshold value, the processingunit determines that the value (“A”) of the sixth input is a false/fakeinput and disregards the value (“A”) of the sixth input as a componentpart of the authentication code provided by the user. Irrespective ofthe determination made by the processing unit, the processing unit alsocontrols the output interface 320 to display a sixth graphical element335 vi in the rectangular region 330, as depicted in FIG. 4C so as todisplay an input acknowledgement signal that indicates the sixth userinput provided by the user pressing the first button 310A was received.

FIG. 4B further depicts that the user then finally provides the seventhinput (i.e. pressing second button 310B) by applying a strong (e.g.high) pressure that exceeds the predefined threshold value, Th, therebyindicating that the input value (“B”) of the seventh input is atrue/real input. The pressure determination arrangement determines avalue of the (e.g. strong) applied pressure and the processing unitcompares the determined value of the applied pressure with the thresholdvalue so as to identify that the value of the applied pressure exceedsthe threshold value Th. In view of identifying that the value of theapplied pressure exceeds the threshold value, Th, the processing unitdetermines that the value (“B”) of the seventh input is a true/realinput and records the input value (“B”) as the fourth component part ofthe authentication code provided by the user, as depicted in FIG. 4D.Irrespective of the determination made by the processing unit, theprocessing unit also controls the output interface 320 to display aseventh graphical element 335 vii in the rectangular region 330, asdepicted in FIG. 4C, so as to display an input acknowledgement signalthat indicates the seventh user input provided by the user pressing thesecond button 310B was received.

From the above example depicted in FIGS. 4A-D, by using or ignoringinputs based on the pressure applied to the pressure-sensitive inputinterface 310 when entering the inputs, the user may enter inputs,namely the third, fourth and sixth inputs, that, although ignored andnot used as component parts of the authentication code, appear to formpart of the authentication code by a viewer observing the user and theinput acknowledgement signal displayed by the output interface 320 ofthe PDA 300.

In particular, in the example depicted in FIGS. 4A-D, the embodimentenables the user to input dummy/fake characters such that the userappears (to an observer) to input the authentication code “ABCDEAB”, andappearing to input the authentication code may be reinforced by theoutput interface 320 of the PDA 300 displaying seven graphical elementson the output interface 320 as if all seven inputs provided by the userare received and used by the PDA 300. In this way, the authenticationcode “ABEB” may be received and used by the PDA 300 whilst beingprotected from an observer.

FIG. 5 is a simplified diagram of a door entry system, in accordancewith embodiments of the present invention. In this example, the doorentry system 500 is an electronic-based door-entry system 500, butsimilar examples may be employed.

The door entry system 500 comprises an apparatus for authenticating auser according to an exemplary embodiment. More specifically, the doorentry system 500 comprises a pressure-sensitive input interface 510adapted to receive user inputs, and a pressure determination arrangement(not shown) adapted to determine a pressure applied to thepressure-sensitive input interface by the user when providing the userinputs.

By way of example, the pressure-sensitive input interface 510 maycomprise a numerical keypad having first 510A to twelfth 510L buttons,and a pressure determination arrangement may be integrated with thepressure sensitive input 510 so that the pressure determinationarrangement is positioned directly underneath the first 510A to twelfth510L buttons, and thus not visible from the exterior of the door entrysystem 500.

The door entry system 500 also comprises a processing unit (not shown),an output interface 520, and a handle 530. The handle 530 may only beturned to an unlocked position as indicated by the dashed-line versionof the handle labelled “530B”, so as to unlock a door associated withthe door entry system for example, if the door entry system 500determines a user has input authentication information, via thepressure-sensitive input interface 510, indicating the user isauthorized to open the door.

The processing unit may be adapted to determine whether or not to ignorea user input based on the pressure applied to the pressure-sensitiveinput interface 510 by the user when providing the user input. By way ofexample, the processing unit may comprise an arrangement of one or moremicroprocessors housed within the door entry system 500 and may becommunicatively coupled to the pressure-sensitive input interface 510and the pressure determination arrangement.

The output interface 520 may be adapted to provide an inputacknowledgement signal for indicating a user input was received,irrespective of the whether the processing unit has determined to ignorethe user input. For instance, the output interface 520 may be adapted tooutput an audible sound (e.g. ‘beep’) to indicate reception of a userinput. Each audible sound output may be associated with a separatelyreceived input. In this way, the number of output audible signals mayequal the number of user inputs received via the pressure-sensitiveinput interface 510.

The apparatus for authenticating a user that is provided by the doorentry system 500 may automatically and dynamically distinguish between afalse and real user input received via the pressure-sensitive inputinterface 510 based on a pressure applied when providing the user input.

The apparatus may, for example, process a received user input byanalyzing the pressure applied by the user when providing the user inputso as to determine if the user input is false (e.g. dummy or fake) orreal (e.g. a true input intended by the user to be used as inputinformation). For instance, the processing unit may be adapted tocompare the pressure applied with a threshold value, and to determine toignore the user input based on the comparison result. By way of example,according to an embodiment, the processing unit may be adapted todetermine to ignore the user input if the comparison result indicatesthe pressure applied is less than the threshold value. Conversely, theprocessing unit may be adapted to determine to use (e.g. not ignore) theuser input if the comparison result indicates the pressure applied isgreater than the threshold value. Because such a comparison process isrelatively simple, the processing undertaken by the processing unit maybe minimal and therefore not impact available processing and/or powerresources of the door entry system 500. The processing may also beundertaken so quickly that the processing is undertaken in real-time(e.g. practically instantaneously).

The apparatus of the door entry system 500 may thus be arranged suchthat falsified or dummy user inputs are ignored or disregarded.Furthermore, irrespective of the whether the user inputs are ignored,the output interface 520 may provide an input acknowledgement signalwhilst providing an acknowledgement signal for indicating all of theuser inputs have been used. For instance, the output interface 520 maybe adapted to output an input acknowledgement signal comprising aplurality of audible sounds, wherein the number of output sounds isequal to the number of user inputs received via the pressure-sensitiveinput interface 510. In this way, the acknowledgement signal may misleada third-party into thinking that the falsified or dummy user inputs formpart of the input information.

For example, the door entry system 500 may enable a user to input anauthentication code or password via the first 510A to tenth 510J buttons(i.e. numbered “0” through “9”, respectively) of the pressure-sensitiveinput interface 510. The inputs provided by the user may comprise dummyor fake component parts (e.g. false button presses) that are indicatedas such by the user only pressing lightly (e.g. applying a low pressure)on the pressure-sensitive input interface 510 when the dummy or fakeinputs are provided. Such dummy or fake component parts of the inputinformation may be identified by the processing unit (based on theapplied pressure) and then disregarded/ignored as inputs. In this way, athird-party observing the user inputting the information may beprevented from learning the correct/real authentication code or passwordby watching the user input information.

Put another way, the apparatus of the door entry system 500 may useapplied-pressure information obtained by the pressure determinationarrangement to identify and disregard at least one user input whilstproviding a visual acknowledgement signal suggesting to an observer thatall inputs are true/real (e.g. implying that no user inputs have beendisregarded).

Thus, embodiments of the door entry system 500 of FIG. 5 mayautomatically and dynamically identify and disregard dummy inputsprovided by a user based on pressure applied by the user when providingthe inputs, which may enable a user to identify dummy/fake inputs to thedoor entry system 500 in a quick and simple manner that is not visibleto an observing party. The user may also be free to choose in what orderor combination to provide the dummy/fake inputs. The embodiment maytherefore enable a high degree of flexibility and ease of use for auser.

FIG. 6A depicts a sequence of user inputs provided viapressure-sensitive input interface with respect to time, in accordancewith embodiments of the present invention. FIG. 6B depicts the pressureapplied to pressure-sensitive input interface with respect to time forthe same time period as that of FIG. 6A, in accordance with embodimentsof the present invention. FIG. 6C depicts the sounds output by theoutput interface with respect to time, in accordance with embodiments ofthe present invention. FIG. 6D depicts the real/true input as determinedby the processing unit and as intended to be provided by the user foruse actual input information, in accordance.

Here, the first 510A to tenth 510J buttons are associated with inputs“0” to “9” respectively. An authentication code comprising a sequence ofnumbers selected from the set of “0” to “9” may therefore be input by auser pressing the first 510A to tenth 510J buttons in the appropriateorder. By way of example, a user may wish to enter an authenticationcode “2457” using the pressure-sensitive input interface 510 of the doorentry system 500. However, in doing so, and in accordance withembodiments, the user may attempt to obfuscate the input authenticationcode by inputting dummy/fake characters when inputting theauthentication code. By way of example, the user may input dummy/fakecharacters such that the user presses the first 510A to tenth 510Jbuttons in a sequence that indicates the input code as “1234567”.

Referring to FIG. 6A, the user presses buttons of the pressure-sensitiveinput interface 510 in the order depicted by the numbers in therespective time slots. More specifically, the user presses the buttonsin the following order: second button 510B, followed by the third button510C, followed by the fourth button 510D, followed by the fifth button510E, followed by the sixth button 510F, followed by the seventh button510F, and then finally the eighth button 510G.

Referring now to FIG. 6B, the pressure applied by the user to thepressure-sensitive input interface 510 when pressing each of the buttonsof the above mentioned order/sequence can be seen.

In particular, the user provides the first input (i.e. pressing secondbutton 510B) by applying a light (e.g. low) pressure that does notexceed a predefined threshold value, Th, thereby indicating that theinput (“1”) of the first input is a false/fake input. The pressuredetermination arrangement determines a value of the (e.g. light) appliedpressure and the processing unit compares the determined value of theapplied pressure with the threshold value, Th, so as to identify thatthe value of the applied pressure does not exceed the threshold value,Th. In view of identifying the value of the applied pressure does notexceed the threshold value Th, the processing unit determines that thevalue (“1”) of the first input is a false/fake input and disregards thevalue (“1”) of the first input as a component part of the authenticationcode provided by the user. Irrespective of the determination made by theprocessing unit, the processing unit also controls the output interface520 to output a first audible sound (e.g. beep) as depicted in FIG. 6Cso as to output an input acknowledgement signal that indicates the firstuser input provided by the user pressing the second button 510B wasreceived.

Next, FIG. 6B shows that the user provides the second input (i.e.pressing third button 510C) by applying a strong (e.g. high) pressurethat exceeds the predefined threshold value, Th, thereby indicating thatthe input value (“2”) of the second input is a true/real input. Thepressure determination arrangement determines a value of the (e.g.strong) applied pressure and the processing unit compares the determinedvalue of the applied pressure with the threshold value so as to identifythat the value of the applied pressure exceeds the threshold value, Th.In view of identifying that the value of the applied pressure exceedsthe threshold value, Th, the processing unit determines that the value(“2”) of the second input is a true/real input and records the input(“2”) as the first component part of the authentication code provided bythe user, as depicted in FIG. 6D. Irrespective of the determination madeby the processing unit, the processing unit also controls the outputinterface 520 to output a second audible sound (e.g. beep) as depictedin FIG. 6C so as to output an input acknowledgement signal thatindicates the second user input provided by the user pressing the thirdbutton 510C was received.

Next, FIG. 6B depicts that the user provides the third input (i.e.pressing fourth button 510D) by applying a light (e.g. low) pressurethat does not exceed the predefined threshold value, Th, therebyindicating that the input (“3”) of the third input is a false/fakeinput. The pressure determination arrangement determines a value of the(light) applied pressure and the processing unit compares the determinedvalue of the applied pressure with the threshold value, Th so as toidentify that the value of the applied pressure does not exceed thethreshold value, Th. In view of identifying that the value of theapplied pressure does not exceed the threshold value, the processingunit determines that the value (“3”) of the third input is a false/fakeinput and disregards the value (“3”) of the third input as a componentpart of the authentication code provided by the user. Irrespective ofthe determination made by the processing unit, the processing unit alsocontrols the output interface 520 to output a third audible sound (e.g.beep) as depicted in FIG. 6C so as to output an input acknowledgementsignal that indicates the third user input provided by the user pressingthe fourth button 510D was received.

Referring still to FIG. 6B, the user then provides the fourth input(i.e. pressing fifth button 510E) by applying a strong (e.g. high)pressure that exceeds the predefined threshold value, Th, therebyindicating that the input value (“4”) of the fourth input is a true/realinput. The pressure determination arrangement determines a value of the(strong) applied pressure and the processing unit compares thedetermined value of the applied pressure with the threshold value so asto identify that the value of the applied pressure exceeds the thresholdvalue, Th. In view of identifying that the value of the applied pressureexceeds the threshold value, Th, the processing unit determines that thevalue (“4”) of the fourth input is a true/real input and records theinput (“4”) as the second component part of the authentication codeprovided by the user, as depicted in FIG. 6D. Irrespective of thedetermination made by the processing unit, the processing unit alsocontrols the output interface 520 to output a fourth audible sound (e.g.beep) as depicted in FIG. 6C so as to output an input acknowledgementsignal that indicates the fourth user input provided by the userpressing the fifth button 510E was received.

Referring to FIG. 6B, the user then provides the fifth input (i.e.pressing sixth button 510F) by applying a strong (e.g. high) pressurethat exceeds the predefined threshold value, Th, thereby indicating thatthe input value (“5”) of the fifth input is a true/real input. Thepressure determination arrangement determines a value of the (strong)applied pressure and the processing unit compares the determined valueof the applied pressure with the threshold value so as to identify thatthe value of the applied pressure exceeds the threshold value, Th. Inview of identifying that the value of the applied pressure exceeds thethreshold value, Th, the processing unit determines that the value (“5”)of the fifth input is a true/real input and records the input (“5”) asthe third component part of the authentication code provided by theuser, as depicted in FIG. 6D. Irrespective of the determination made bythe processing unit, the processing unit also controls the outputinterface 520 to output a fifth audible sound (e.g. beep) as depicted inFIG. 6C so as to output an input acknowledgement signal that indicatesthe fifth user input provided by the user pressing the sixth button 510Fwas received.

Next, from FIG. 6B, the user then provides the sixth input (i.e.pressing seventh 510G) by applying a light (e.g. low) pressure that doesnot exceed the predefined threshold value Th, thereby indicating thatthe input value (“6”) of the sixth input is a false/fake input. Thepressure determination arrangement determines a value of the (e.g.light) applied pressure and the processing unit compares the determinedvalue of the applied pressure with the threshold value, Th so as toidentify that the value of the applied pressure does not exceed thethreshold value, Th. In view of identifying that the value of theapplied pressure does not exceed the threshold value, the processingunit determines that the value (“6”) of the sixth input is a false/fakeinput and disregards the value (“6”) of the sixth input as a componentpart of the authentication code provided by the user. Irrespective ofthe determination made by the processing unit, the processing unit alsocontrols the output interface 520 to output a sixth audible sound (e.g.beep) as depicted in FIG. 6C so as to output an input acknowledgementsignal that indicates the sixth user input provided by the user pressingthe seventh button 510G was received.

Referring still to FIG. 6B, the user then finally provides the seventhinput (i.e. pressing eighth button 510H) by applying a strong (e.g.high) pressure that exceeds the predefined threshold value, Th, therebyindicating that the input value (“7”) of the seventh input is atrue/real input. The pressure determination arrangement determines avalue of the (e.g. strong) applied pressure and the processing unitcompares the determined value of the applied pressure with the thresholdvalue so as to identify that the value of the applied pressure exceedsthe threshold value, Th. In view of identifying that the value of theapplied pressure exceeds the threshold value, Th, the processing unitdetermines that the value (“7”) of the seventh input is a true/realinput and records the input value (“7”) as the fourth component part ofthe authentication code provided by the user as depicted in FIG. 6D.Irrespective of the determination made by the processing unit, theprocessing unit also controls the output interface 520 to output aseventh audible sound (e.g. beep) as depicted in FIG. 6C so as to outputan input acknowledgement signal that indicates the seventh user inputprovided by the user pressing the eighth button 510H was received.

From the above example depicted in FIGS. 6A-D, by using or ignoringinputs based on the pressure applied to the pressure-sensitive inputinterface 510 when entering the inputs, the user may enter inputs,namely the first, third and sixth inputs that, although ignored and notused as component parts of the authentication code, appear to form partof the authentication code by a viewer observing the user and the inputacknowledgement signal output by the speaker of the output interface 520of the door entry system 500.

In particular, in the example depicted in FIGS. 6-D, the embodimentenables the user to input dummy/fake characters such that the userappears to an observer to input the authentication code “1234567”, andappearing to input the authentication code may be reinforced by theoutput interface 520 making seven audible sounds (e.g. beeps) as if allseven inputs provided by the user are received and used by the doorentry system 500. In this way, the authentication code “2457” may bereceived and used by the door entry system 500 whilst being protectedfrom an observer.

FIG. 7 is a flow diagram of a computer-implemented method 800, inaccordance with embodiments of the present invention. Method 800according to an embodiment will now be described. The method may enableauthentication of a user whilst protecting authentication informationprovided by the user.

The method may comprise the steps of: receiving 810 a user input via apressure-sensitive input interface, the user input being indicative of apossible component part of an authentication code or pattern. A pressureapplied to the pressure-sensitive input interface by the user whenproviding the user input is then determined in step 820.

Step 830 determines whether or not to ignore the user input as acomponent part of the authentication code or pattern based on thepressure applied. By way of example, step 830 of determining whether ornot to ignore the user input may comprise comparing the pressure appliedwith a threshold value and determining whether to ignore the user inputbased on the comparison result. Step 840, then checks the determinationresult of step 830 in order to direct the method to the appropriate nextstep.

If step 830 determines to ignore the user input as a component part ofthe authentication code or pattern (e.g. if the comparison result fromstep 830 indicates the pressure applied is less than the thresholdvalue), step 840 directs the method to proceed to step 850 wherein theuser input is disregarded (e.g. ignored, not used, etc.) and the methodthe proceeds to step 860.

If, on the other hand, step 830 determines not to ignore the user inputas a component part of the authentication code or pattern (e.g. if thecomparison result indicates the pressure applied is greater than orequal to the threshold value), step 840 directs the method to proceeddirectly to step 860.

In step 860, an input acknowledgement signal is provided via an outputinterface so as to indicate that the user input was received. By way ofexample, the input acknowledgement signal may be adapted to communicatea visual signal (e.g. graphical element, visible light signal,colour-based signal, etc.) or an audio signal (e.g. beep, bleep, click,audio sequence, etc.) indicating that the user input was received viathe pressure-sensitive input interface.

Step 860 provides an acknowledgement signal irrespective of the whetherstep 830 determines to ignore the user input.

After completing step 860, the method may return to step 810 so as torepeat the method for further user inputs.

A practical example of an embodiment being used in user authenticationmay comprise a person using a pressure-sensitive keypad of an ATM,wherein an embodiment would determine whether to use or ignore inputsbased on a pressure applied to the pressure-sensitive keypad when a userprovides the inputs. Irrespective of whether a user input is ignored orused, an input acknowledgement signal (i.e. such as an audible beep anda displayed graphical symbol) may be provided by the ATM so as toindicate the user input was received.

FIG. 8 is a block diagram of a computer device, in accordance withembodiments of the present invention. Various operations discussed abovemay utilize the capabilities of the computer 800. For example, one ormore parts of a system for authenticating a user may be incorporated inany element, module, application, and/or component discussed herein.

The computer 800 includes, but is not limited to, PCs, workstations,laptops, PDAs, palm devices, smartphones, image capture devices, videocapture devices, internet-enabled displays, servers, storages, and thelike. Generally, in terms of hardware architecture, the computer 800 mayinclude one or more processors 810, memory 820, and one or more I/Odevices 870 that are communicatively coupled via a local interface (notshown). The local interface can be, for example but not limited to, oneor more buses or other wired or wireless connections, as is known in theart. The local interface may have additional elements, such ascontrollers, buffers (caches), drivers, repeaters, and receivers, toenable communications. Further, the local interface may include address,control, and/or data connections to enable appropriate communicationsamong the aforementioned components.

The processor 810 is a hardware device for executing software that canbe stored in the memory 820. The processor 810 can be virtually anycustom made or commercially available processor, a central processingunit (CPU), a digital signal processor (DSP), or an auxiliary processoramong several processors associated with the computer 800, and theprocessor 810 may be a semiconductor based microprocessor (in the formof a microchip) or a microprocessor.

The memory 820 can include any one or combination of volatile memoryelements (e.g., random access memory (RAM), such as dynamic randomaccess memory (DRAM), static random access memory (SRAM), etc.) andnon-volatile memory elements (e.g., ROM, erasable programmable read onlymemory (EPROM), electronically erasable programmable read only memory(EEPROM), programmable read only memory (PROM), tape, compact disc readonly memory (CD-ROM), disk, diskette, cartridge, cassette or the like,etc.). Moreover, the memory 820 may incorporate electronic, magnetic,optical, and/or other types of storage media. Note that the memory 820can have a distributed architecture, where various components aresituated remote from one another, but can be accessed by the processor810.

The software in the memory 820 may include one or more separateprograms, each of which comprises an ordered listing of executableinstructions for implementing logical functions. The software in thememory 820 includes a suitable operating system (O/S) 850, compiler 840,source code 830, and one or more applications 860 in accordance withexemplary embodiments. As illustrated, the application 860 comprisesnumerous functional components for implementing the features andoperations of the exemplary embodiments. The application 860 of thecomputer 800 may represent various applications, computational units,logic, functional units, processes, operations, virtual entities, and/ormodules in accordance with exemplary embodiments, but the application860 is not meant to be a limitation.

The operating system 850 controls the execution of other computerprograms, and provides scheduling, input-output control, file and datamanagement, memory management, and communication control and relatedservices. It is contemplated by the inventors that the application 860for implementing exemplary embodiments may be applicable on allcommercially available operating systems.

Application 860 may be a source program, executable program (objectcode), script, or any other entity comprising a set of instructions tobe performed. When a source program, then the program is usuallytranslated via a compiler (such as the compiler 840), assembler,interpreter, or the like, which may or may not be included within thememory 820, so as to operate properly in connection with the O/S 850.The I/O devices 870 may include input devices such as, for example butnot limited to, a mouse, keyboard, scanner, microphone, camera, etc.Furthermore, the I/O devices 870 may also include output devices, forexample but not limited to a printer, display, etc. Finally, the I/Odevices 870 may further include devices that communicate both inputs andoutputs, for instance but not limited to, a NIC or modulator/demodulator(for accessing remote devices, other files, devices, systems, or anetwork), a radio frequency (RF) or other transceiver, a telephonicinterface, a bridge, a router, etc. The I/O devices 870 also includecomponents for communicating over various networks, such as the Internetor intranet.

If the computer 800 is a PC, workstation, intelligent device or thelike, the software in the memory 820 may further include a basic inputoutput system (BIOS) (omitted for simplicity). The BIOS is a set ofessential software routines that initialize and test hardware atstartup, start the O/S 850, and support the transfer of data among thehardware devices. The BIOS is stored in some type of read-only-memory,such as ROM, PROM, EPROM, EEPROM or the like, so that the BIOS can beexecuted when the computer 800 is activated.

When the computer 800 is in operation, the processor 810 is configuredto execute software stored within the memory 820, to communicate data toand from the memory 820, and to generally control operations of thecomputer 800 pursuant to the software. The application 860 and the O/S850 are read, in whole or in part, by the processor 810, perhapsbuffered within the processor 810, and then executed.

When the application 860 is implemented in software it should be notedthat the application 860 can be stored on virtually any computerreadable medium for use by or in connection with any computer relatedsystem or method. In the context of this document, a computer readablemedium may be an electronic, magnetic, optical, or other physical deviceor means that can contain or store a computer program for use by or inconnection with a computer related system or method.

The application 860 can be embodied in any computer-readable medium foruse by or in connection with an instruction execution system, apparatus,or device, such as a computer-based system, processor-containing system,or other system that can fetch the instructions from the instructionexecution system, apparatus, or device and execute the instructions. Inthe context of this document, a “computer-readable medium” can be anymeans that can store, communicate, propagate, or transport the programfor use by or in connection with the instruction execution system,apparatus, or device. The computer readable medium can be, for examplebut not limited to, an electronic, magnetic, optical, electromagnetic,infrared, or semiconductor system, apparatus, device, or propagationmedium.

In the context of the present application, where embodiments of thepresent invention constitute a method, it should be understood that sucha method is a process for execution by a computer, i.e. is acomputer-implementable method. The various steps of the method thereforereflect various parts of a computer program, e.g. various parts of oneor more algorithms.

The present invention may be a system, a method, and/or a computerprogram product at any possible technical detail level of integration.The computer program product may include a computer readable storagemedium (or media) having computer readable program instructions thereonfor causing a processor to carry out aspects of the present invention.

The computer readable storage medium can be a tangible device that canretain and store instructions for use by an instruction executiondevice. The computer readable storage medium may be, for example, but isnot limited to, an electronic storage device, a magnetic storage device,an optical storage device, an electromagnetic storage device, asemiconductor storage device, or any suitable combination of theforegoing. A non-exhaustive list of more specific examples of thecomputer readable storage medium includes the following: a portablecomputer diskette, a hard disk, a random access memory (RAM), aread-only memory (ROM), an erasable programmable read-only memory (EPROMor Flash memory), a static random access memory (SRAM), a portablecompact disc read-only memory (CD-ROM), a digital versatile disk (DVD),a memory stick, a floppy disk, a mechanically encoded device such aspunch-cards or raised structures in a groove having instructionsrecorded thereon, and any suitable combination of the foregoing. Acomputer readable storage medium, as used herein, is not to be construedas being transitory signals per se, such as radio waves or other freelypropagating electromagnetic waves, electromagnetic waves propagatingthrough a waveguide or other transmission media (e.g., light pulsespassing through a fiber-optic cable), or electrical signals transmittedthrough a wire.

Computer readable program instructions described herein can bedownloaded to respective computing/processing devices from a computerreadable storage medium or to an external computer or external storagedevice via a network, for example, the Internet, a local area network, awide area network and/or a wireless network. The network may comprisecopper transmission cables, optical transmission fibers, wirelesstransmission, routers, firewalls, switches, gateway computers and/oredge servers. A network adapter card or network interface in eachcomputing/processing device receives computer readable programinstructions from the network and forwards the computer readable programinstructions for storage in a computer readable storage medium withinthe respective computing/processing device.

Computer readable program instructions for carrying out operations ofthe present invention may be assembler instructions,instruction-set-architecture (ISA) instructions, machine instructions,machine dependent instructions, microcode, firmware instructions,state-setting data, configuration data for integrated circuitry, oreither source code or object code written in any combination of one ormore programming languages, including an object oriented programminglanguage such as Smalltalk, C++, or the like, and procedural programminglanguages, such as the “C” programming language or similar programminglanguages. The computer readable program instructions may executeentirely on the user's computer, partly on the user's computer, as astand-alone software package, partly on the user's computer and partlyon a remote computer or entirely on the remote computer or server. Inthe latter scenario, the remote computer may be connected to the user'scomputer through any type of network, including a local area network(LAN) or a wide area network (WAN), or the connection may be made to anexternal computer (for example, through the Internet using an InternetService Provider). In some embodiments, electronic circuitry including,for example, programmable logic circuitry, field-programmable gatearrays (FPGA), or programmable logic arrays (PLA) may execute thecomputer readable program instructions by utilizing state information ofthe computer readable program instructions to personalize the electroniccircuitry, in order to perform aspects of the present invention.

Aspects of the present invention are described herein with reference toflowchart illustrations and/or block diagrams of methods, apparatus(systems), and computer program products according to embodiments of theinvention. It will be understood that each block of the flowchartillustrations and/or block diagrams, and combinations of blocks in theflowchart illustrations and/or block diagrams, can be implemented bycomputer readable program instructions.

These computer readable program instructions may be provided to aprocessor of a general purpose computer, special purpose computer, orother programmable data processing apparatus to produce a machine, suchthat the instructions, which execute via the processor of the computeror other programmable data processing apparatus, create means forimplementing the functions/acts specified in the flowchart and/or blockdiagram block or blocks. These computer readable program instructionsmay also be stored in a computer readable storage medium that can directa computer, a programmable data processing apparatus, and/or otherdevices to function in a particular manner, such that the computerreadable storage medium having instructions stored therein comprises anarticle of manufacture including instructions which implement aspects ofthe function/act specified in the flowchart and/or block diagram blockor blocks.

The computer readable program instructions may also be loaded onto acomputer, other programmable data processing apparatus, or other deviceto cause a series of operational steps to be performed on the computer,other programmable apparatus or other device to produce a computerimplemented process, such that the instructions which execute on thecomputer, other programmable apparatus, or other device implement thefunctions/acts specified in the flowchart and/or block diagram block orblocks.

The flowchart and block diagrams in the Figures illustrate thearchitecture, functionality, and operation of possible implementationsof systems, methods, and computer program products according to variousembodiments of the present invention. In this regard, each block in theflowchart or block diagrams may represent a module, segment, or portionof instructions, which comprises one or more executable instructions forimplementing the specified logical function(s). In some alternativeimplementations, the functions noted in the blocks may occur out of theorder noted in the Figures. For example, two blocks shown in successionmay, in fact, be executed substantially concurrently, or the blocks maysometimes be executed in the reverse order, depending upon thefunctionality involved. It will also be noted that each block of theblock diagrams and/or flowchart illustration, and combinations of blocksin the block diagrams and/or flowchart illustration, can be implementedby special purpose hardware-based systems that perform the specifiedfunctions or acts or carry out combinations of special purpose hardwareand computer instructions.

In one embodiment, the system of the present invention may be or includea hardware device such as a computer, portable device, etc. In oneembodiment, the hardware device is or includes a special-purpose device(e.g., computer, machine, portable device) that comprises specialized,non-generic hardware and circuitry (i.e., specialized discretenon-generic analog, digital, and logic based circuitry) for(independently or in combination) particularized for executing onlymethods of the present invention. The specialized discrete non-genericanalog, digital, and logic based circuitry may include proprietaryspecially designed components (e.g., a specialized integrated circuit,such as for example an Application Specific Integrated Circuit (ASIC),designed for only implementing methods of the present invention).

A computer program product of the present invention may include one ormore computer readable hardware storage devices having computer readableprogram code stored therein, said program code containing instructionsexecutable by one or more processors of a computing system (or computersystem) to implement the methods of the present invention.

A computer system of the present invention may include one or moreprocessors, one or more memories, and one or more computer readablehardware storage devices, said one or more hardware storage devicescontaining program code executable by the one or more processors via theone or more memories to implement the methods of the present invention.

What is claimed is:
 1. A door entry system comprising: a numericalkeypad having a plurality of pressure-sensitive buttons; a pressuredetermination arrangement configured to determine a pressure applied tothe pressure-sensitive buttons on the numerical keypad; a processingunit configured to: distinguish real user inputs that represent acomponent part of the authentication code or pattern from fake userinputs that do not represent a component part of the authentication codeor pattern, based on the pressure applied to the pressure-sensitivebuttons, and ignore the fake user inputs; and a handle proximate thenumerical keypad.
 2. The door entry system of claim 1, wherein thepressure determination arrangement is located behind the numericalkeypad such that the pressure determination arrangement is not visiblefrom an exterior of the door entry system.
 3. The door entry system ofclaim 1, wherein the processing unit is one or more microprocessorshoused within the door entry system, which are communicatively coupledto the plurality of pressure-sensitive buttons.
 4. The door entry systemof claim 1, further comprising an output interface.
 5. The door entrysystem of claim 1, wherein the output interface is configured to providean input acknowledgement signal for indicating that a user input wasreceived via a pressed pressure sensitive button on the numericalkeypad, irrespective of whether the processing unit has determined thatthe input is a real user input or a fake user input.
 6. The door entrysystem of claim 5, wherein the input acknowledgement signal is anaudible sound output by the output interface.
 7. The door entry systemof claim 1, wherein the handle is allowed to be moved to an unlockedposition in response to the processing unit determining that the
 8. Amethod for providing security at a door entry location, the methodcomprising: receiving, by a processor unit of a door entry system, aplurality of user inputs via a pressure-sensitive input interface, thepressure-sensitive input interface being a plurality ofpressure-sensitive buttons arranged on a numerical keypad of the doorentry system; determining, by the processor unit, a pressure applied tothe pressure-sensitive buttons by a user when attempting to unlock thedoor entry system; and distinguishing, by the processor unit, real userinputs that represent a component part of an authentication code orpattern from fake user inputs that do not represent a component part ofthe authentication code or pattern, based on the pressure applied to thepressure-sensitive input interface.
 9. The method of claim 8, furthercomprising: ignoring, by the processor unit, the fake user inputs. 10.The method of claim 8, further comprising: irrespective of the whether auser input is a real user input or a fake user input, providing, by theprocessor unit, an input acknowledgement signal to an output interfaceof the door entry system for indicating the user input was received. 11.The method of claim 10, wherein the input acknowledgement signal is anaudible sound output by the output interface
 12. The method of claim 8,wherein the step of distinguishing real user inputs from fake userinputs comprises: comparing, by the processor unit, the pressure appliedwith a threshold value; and determining, by the processor unit, that theuser input is a fake user input if a result of the comparing indicatesthat the pressure applied is less than the threshold value.
 13. Acomputer program product, comprising a computer readable hardwarestorage device storing a computer readable program code, the computerreadable program code comprising an algorithm that when executed by acomputer processor of a computing system implements a method forproviding security at a door entry location, the method comprising:receiving, by a processor unit of a door entry system, a plurality ofuser inputs via a pressure-sensitive input interface, thepressure-sensitive input interface being a plurality ofpressure-sensitive buttons arranged on a numerical keypad of the doorentry system; determining, by the processor, a pressure applied to thepressure-sensitive buttons by a user when attempting to unlock the doorentry system; and distinguishing, by the processor, real user inputsthat represent a component part of an authentication code or patternfrom fake user inputs that do not represent a component part of theauthentication code or pattern, based on the pressure applied to thepressure-sensitive input interface.
 14. The computer program product ofclaim 13, further comprising: ignoring, by the processor unit, the fakeuser inputs.
 15. The computer program product of claim 13, furthercomprising: irrespective of the whether a user input is a real userinput or a fake user input, providing, by the processor unit, an inputacknowledgement signal to an output interface of the door entry systemfor indicating the user input was received.
 16. The computer programproduct of claim 115, wherein the input acknowledgement signal is anaudible sound output by the output interface
 17. The computer programproduct of claim 13, wherein the step of distinguishing real user inputsfrom fake user inputs comprises: comparing, by the processor unit, thepressure applied with a threshold value; and determining, by theprocessor unit, that the user input is a fake user input if a result ofthe comparing indicates that the pressure applied is less than thethreshold value.